Two SOCs, Two Outcomes: CISA Red Team Dismantles Defenses of Two Critical Infrastructures
CISA red team assessments show varying detection capabilities in critical infrastructures, with both ultimately breached.
APT
More news
Page 5 / 8 · 71 articles
SPECTRE, the backdoor that disables EDRs: inside UAT-10147's arsenal
Recently, Cisco Talos published a two-part analysis of the Chinese-speaking group UAT-10147 , which is active against Windows and Linux web servers on a
SilkParasite: AI-Assisted Malware and Economic Espionage in Central Asia
SilkParasite: AI malware targeting Central Asia's economic institutions via spearphishing and Google Drive. Linked to Chinese espionage campaigns.
Iranian Attack Shuts Down British Power Plant for Four Days
Iranian hackers linked to IRGC shut down a small British power plant for four days, highlighting vulnerabilities in UK critical infrastructure security.
Three Russia-Linked Clusters Use OAuth, WhatsApp, and Malware Against Western Targets
Explore three Russia-linked cyber-espionage clusters using OAuth, WhatsApp, and malware against Western researchers, officials, and analysts in phishing campaigns.
Active Threat Targeting Siemens S7 PLCs: AI-Generated Scripts and Internet Scanning Prepare Potential Industrial Attacks
U.S. agencies report an active threat using AI-generated scripts to target Siemens S7 PLCs via internet scanning, risking industrial facilities. Recommendations included.
Cavern Hides Among DNS, Google Apps Script, and Microsoft 365 Calendars
Explore how the Iranian Cavern framework uses DNS, Google Apps Script, and Microsoft 365 calendars for command-and-control in cyber attacks.
Mustang Panda Strengthens CoolClient with a Hard-to-Detect Kernel Rootkit
Mustang Panda's CoolClient adds kernel rootkit for evasion, targeting Asian governments. Analysis of msagent.sys and infection methods.
Jewelbug: The APT Group Blending State Espionage with Cryptocurrency Theft
Jewelbug, a Chinese APT group, blends state-sponsored cyberespionage with cryptocurrency theft using advanced tools and infrastructure.